diff --git a/tools/pinning/current/pyproject.toml b/tools/pinning/current/pyproject.toml
index ca04a0ada..c04180b06 100644
--- a/tools/pinning/current/pyproject.toml
+++ b/tools/pinning/current/pyproject.toml
@@ -51,6 +51,10 @@ awscli = ">=1.19.62"
 # as a dependency here to ensure a version of cython is pinned for extra
 # stability.
 cython = "*"
+# Due to better type annotations in new versions, mypy tests currently fail
+# with new versions of josepy so we pin it back for now. Fixing this is being
+# tracked by https://github.com/certbot/certbot/issues/9113.
+josepy = "1.9.0"
 # We install mock in our "external-mock" tox environment to test that we didn't
 # break Certbot's test API which used to always use mock objects from the 3rd
 # party mock library. We list the mock dependency here so that is pinned, but
diff --git a/tools/requirements.txt b/tools/requirements.txt
index 05c3bf63f..38bf7c0cc 100644
--- a/tools/requirements.txt
+++ b/tools/requirements.txt
@@ -76,7 +76,7 @@ jedi==0.18.1; python_version == "3.6" or python_version >= "3.7"
 jeepney==0.7.1; python_version >= "3.6" and python_version < "4.0" and sys_platform == "linux"
 jinja2==3.0.3; python_version >= "3.6" or python_version >= "3.6"
 jmespath==0.10.0; python_version >= "3.6" and python_full_version < "3.0.0" or python_full_version >= "3.3.0" and python_version >= "3.6"
-josepy==1.11.0; python_version >= "3.6"
+josepy==1.9.0; python_version >= "3.6"
 jsonlines==2.0.0; python_version >= "3.6"
 jsonpickle==2.0.0; python_version >= "3.6"
 jsonschema==3.2.0; python_version >= "3.6" and python_full_version < "3.0.0" or python_full_version >= "3.4.0" and python_version >= "3.6"